Monitoring system for determining and communicating a cost of insurance

ABSTRACT

Means are provided for recording, storing, calculating, communicating and reviewing one or more operational aspects of a machine. Insurance costs are based, in part, on activities of the machine operator. A discount may be provided in exchange for recording the operational aspects and providing the recorded information to the insurer. The party may review information and decide whether to provide it to the insurer. The means for reviewing may present comparative information. Information that causes insurance costs to vary may be highlighted. Provided data may be used to verify insurance application information, generate actuarial information or determine insurance rates. Operating data may be reviewed on display medium so a party can observe how his operating behavior compares to that of other operators of similar machines and may be manipulated so a party can understand how changes in operating behavior can affect his insurance rates.

This application is a continuation application of U.S. Ser. No.10/764,076 filed Jan. 23, 2004, which is a continuation-in-partapplication of U.S. Ser. No. 09/571,650 filed May 15, 2000, now U.S.Pat. No. 6,868,386, which is a continuation-in-part of U.S. Ser. No.09/135,034, filed Aug. 17, 1998, now U.S. Pat. No. 6,064,970, which is acontinuation of U.S. Ser. No. 08/592,958, filed Jan. 29, 1996, now U.S.Pat. No. 5,797,134. A related application is U.S. Ser. No. 09/364,803filed Jul. 30, 1999, now U.S. Pat. No. 7,124,088.

FIELD OF THE INVENTION

The present invention relates to data acquisition, processing andcommunicating systems, and particularly to a system for acquiring andprocessing relevant data for an insured unit of risk, such as a vehicleor other machine, for purposes of providing a more accuratedetermination of the cost of insurance for the unit of risk and forcommunicating or quoting the so determined cost to an owner of the unitof risk. Although the invention has its principal applicability to motorvehicles such as automobiles, the invention is equally applicable toother units of risk such as, without limitation, factory machines, farmmachines, motorcycles, motor homes, trucks, tractors, vans, buses, boatsand other water craft and aircraft. The invention especially relates toa system for monitoring and communicating operational characteristicsand operator actions relating to a unit of risk, to obtain increasedamounts of data relating to the safety or risk of use of a subject unit,for purposes of providing a more accurate or customized determination ofthe cost of insurance corresponding to the usage of the risk unit, andfor making such data and computed costs accessible to a non-customer,customer or insured or others on a personal computer, in hardcopy, overthe Internet or by other electronic means for convenient communication.The invention relates to electronic commerce, particularly whereinsurance and related information is marketed, sold or communicated viathe telephone, Internet or other interactive network.

BACKGROUND OF THE INVENTION

Conventional methods for determining costs of motor vehicle insuranceinvolve gathering relevant historical data from a personal interviewwith, or a written application completed by, the applicant for theinsurance and by referencing the applicant's public motor vehicledriving record that is maintained by a governmental agency, such as aBureau of Motor Vehicles. Such data results in a classification of theapplicant to a broad actuarial class for which insurance rates areassigned based upon the empirical experience of the insurer. Manyfactors are deemed relevant to such classification in a particularactuarial class or risk level, such as age, sex, marital status,location of residence and driving record.

The current system of insurance creates groupings of vehicles anddrivers (actuarial classes) based on the following types ofclassifications.

Vehicle:

-   -   Age;    -   manufacturer, model; and    -   value.

Driver:

-   -   Age;    -   sex;    -   marital status;

driving record (based on government reports), violations (citations);

-   -   at fault accidents; and    -   place of residence.

Coverage:

-   -   Types of losses covered,        -   liability,        -   uninsured or underinsured motorist,        -   comprehensive, and        -   collision;    -   liability limits; and    -   deductibles.

The classifications, such as age, are further broken into actuarialclasses, such as 21 to 24, to develop a unique vehicle insurance costbased on the specific combination of attributes for a particular risk.For example, the following information would produce a unique vehicleinsurance cost:

Vehicle:

Age 1997 (seven years old) manufacturer, model Ford, Explorer XLT value$18,000

Driver:

Age 38 years old sex male marital status single driving record (based ongovernment reports) violations 1 point (speeding) at fault accidents 3points (one at fault accident) place of residence 33619 (zip code)

Coverage:

Types of losses covered liability yes uninsured or underinsured nomotorist comprehensive yes collision yes liability limits$100,000/$300,000/$50,000 deductibles $500/$500

A change to any of this information might result in a different premiumbeing charged, if the change resulted in a different actuarial class orrisk level for that variable. For instance, a change in the drivers' agefrom 38 to 39 may not result in a different actuarial class, because 38and 39 year old people may be in the same actuarial class. However, achange in driver age from 38 to 45 may result in a different premiumbecause the records of the insurer indicate a difference in riskassociated with those ages and, therefore, the age difference results ina change in actuarial class or assigned risk level.

Current insurance rating systems also provide discounts and surchargesfor some types of use of the vehicle, equipment on the vehicle and typeof driver. Common surcharges and discounts include:

Surcharges:

Business use.

Discounts:

Safety equipment on the vehicle

-   -   airbags, and    -   antilock brakes;

theft control devices

-   -   passive systems (e.g. “The Club”), an    -   alarm system; and

driver type

-   -   good student, and    -   safe driver (accident free).

group

-   -   senior drivers    -   fleet drivers

A principal problem with such conventional insurance determinationsystems is that much of the data gathered from the applicant in theinterview or from the written application is not verifiable, and evenexisting public records contain only minimal information, much of whichhas little relevance towards an assessment of the likelihood of a claimsubsequently occurring. In other words, current rating systems areprimarily based on past realized losses and the past record of otherdrivers with similar characteristics. None of the data obtained throughconventional systems necessarily reliably predicts the manner or safetyof future operation of the vehicle by the driver/applicant. Accordingly,the limited amount of accumulated relevant data and its minimalevidential value towards computation of a fair cost of insurance hasgenerated a long-felt need for an improved system for more reliably andaccurately accumulating data having a highly relevant evidential valuetowards predicting the actual manner of a vehicle's future operation bya specific driver or group of drivers.

Many types of vehicle operating data recording systems have heretoforebeen suggested for purposes of obtaining an accurate record of certainelements of vehicle operation. Some are suggested for identifying thecause for an accident; others are for more accurately assessing theefficiency of operation and/or environmental emissions of a vehicle.Such systems disclose a variety of conventional techniques for recordingvehicle operation data elements in a variety of data recording systems.It has even been suggested to detect and record seatbelt usage to assistin determination of the vehicle insurance costs (U.S. Pat. No.4,667,336).

The various forms and types of vehicle operating data acquisition andrecordal systems that have heretofore been suggested and employed havemet with varying degrees of success for their express limited purposes.All possess substantial defects such that they have only limitedeconomic and practical value for a system intended to provide anenhanced acquisition, recordal and/or communication system of data whichwould be both comprehensive and reliable in predicting an accurate andadequate cost of insurance for the vehicle. Since the type of operatinginformation acquired and recorded in prior art systems was generallynever intended to be used for determining the cost of vehicle insurance,the data elements that were monitored and recorded therein were notdirectly related to predetermined safety standards or the determining ofan actuarial class or risk level for the vehicle operator. For example,recording data characteristics relevant to the vehicle's exhaustemissions may be completely unrelated to the safety of operation of thevehicle. Further, there is the problem of recording and subsequentlycompiling the relevant data for an accurate determination of anactuarial profile and an appropriate insurance cost therefor.

Current motor vehicle control and operating systems comprise electronicsystems readily adaptable for modification to obtain the desired typesof information relevant to determination of the cost of insurance.Vehicle tracking systems have been suggested which use communicationlinks with satellite navigation systems for providing informationdescribing a vehicle's location based upon navigation signals. When suchpositioning information is combined with maps or geographic informationin an expert system, vehicle location is ascertainable. Mere vehiclelocation, though, will not provide data particularly relevant to safetyof operation unless the data is combined with other relevant data in anexpert system which is capable of assessing whether the roads beingdriven are high-risk or low-risk with regard to vehicle safety.

On-line Web sites for marketing and selling goods have become commonplace. Many insurers offer communication services to customers via Websites relevant to an insured profile and account status. Commonlyassigned pending application U.S. Ser. No. 09/135,034, filed Aug. 17,1998, now U.S. Pat. No. 6,064,970, discloses one such system. Customercomfort with such Web site communication has generated the need forsystems which can provide even more useful information to customersrelative to a customer's contract with the insurer. Such enhancedcommunications can be particularly useful to an insured when the subjectof the communications relates to cost determination, or when the subjectrelates to prospective reoccurring insurable events wherein the systemcan relate in the existing insured's profile with some insurer-providedestimates to the effect that a future event or method of operating aunit of risk would have on an estimated cost of insuring the unit ofrisk.

The present invention contemplates a new and improved monitoring,recording, processing and communicating system for an insured unit ofrisk, such as a machine, which primarily overcomes the problem ofaccurately determining cost of insurance based upon data which does nottake into consideration how a specific unit of risk or machine isoperated or decisions made by a particular unit of risk owner oroperator. The subject invention will base insurance charges with regardto current material data representative of actual decisions made by theoperator and/or operating characteristics to provide a more preciseclassification rating of an operator or the unit in an actuarial classwhich has a vastly reduced rating error over conventional insurance costsystems. Additionally, the present invention allows for frequent (e.g.,monthly, quarterly, semiannually, etc.) adjustment to the cost ofinsurance because of the changes in operating behavior patterns. Thiscan result in insurance charges that are readily controllable byindividual operators. The system is adaptable to current electronicoperating systems, tracking systems and communicating systems for theimproved extraction of selected insurance related data. In addition, thesystem provides for enhanced and improved communication and analysis ofthe relevant acquired data, cost estimates of insuring events andcustomer insured profiles through a personal computer and/orInternet/Web site.

Another deficiency in prior art systems is that such systems were neverintended to allow the operator to control whether to submit to theinsurer the data elements monitored and recorded from the vehicle ormachine. The system solves this problem by providing the means for theoperator to control the submission of information to the insurer and byallowing the operator to understand how modifying operational behavioraffects the cost of insurance.

BRIEF SUMMARY OF THE INVENTION

A system for monitoring, recording, storing and communicatingoperational characteristics and operator actions relating to a unit ofrisk in order to obtain data which reflects the level of safety or riskapplicable to the operation of that unit of risk, for the purpose ofobtaining a more accurate or customized determination of the cost ofinsuring that unit of risk, and for making such data and the resultingcomputed insurance costs accessible to a customer or insured, anon-customer or others on a personal computer, in hardcopy, over theInternet or by other electronic means for convenient review, comparisonand analysis, such system being comprised of: 1) a data logger or otherdata recording device, 2) a means to transfer the data to a computer, ifthe operator so determines, 3) a means to compare the data to dataobtained with respect to the operation of other similar machines orapplicable risk factors, 4) a means to compute a resulting insurancecost and 5) a means to display and manipulate the data on a computer,Web site or other display medium to illustrate the effect of variousoperating characteristics and operator actions, and changes therein, onthe cost of insurance.

BRIEF DESCRIPTION OF THE DRAWINGS

The invention may take form in various components and arrangements ofcomponents, and/or in various procedures and arrangements of procedures.The drawings are only for purposes of illustrating preferredembodiments. They are not to scale, and are not to be construed aslimiting the invention.

FIG. 1 is a block diagram/flowchart generally describing data capturemethods within a unit of risk for insurance in claims processing.

FIG. 2 is a block diagram generally illustrated in the communicationnetwork design the unit of risk including a response center of theinsurer and a data handling center.

FIG. 3 is a suggestive perspective drawing of a vehicle includingcertain data elements monitoring, recording and communication devices.

FIG. 4 is a block diagram of a vehicle onboard computer and recordingsystem implementing the subject invention for selective communicationwith a central operations control center and a global positioningnavigation system.

FIG. 5 is a block diagram illustrating use of acquired data includingcommunication through Internet access.

FIG. 6 is a block diagram/flowchart illustrating an underwriting andrating method for determining a cost of insurance in conjunction withthe system of FIG. 4.

FIG. 7 is a flow chart outlining a method of insurance underwriting andrating related to the operation of a machine associated with a party.

FIG. 8 is first display screen summarizing data received from a devicefor recording data regarding operational aspects of a motor vehicle inconjunction with information related to a cost of insurance andoperational aspects of the operation of other motor vehicles.

FIG. 9 is second display screen summarizing the data received from thedevice for recording data regarding one or more operational aspects ofthe motor vehicle in conjunction with information related to a cost ofinsurance and operational aspects of the operation of other motorvehicles.

FIG. 10 is third display screen summarizing data received from thedevice for recording data regarding one or more operational aspects ofthe motor vehicle in conjunction with information related to a cost ofinsurance and operational aspects of the operation of other motorvehicles.

FIG. 11 is display screen associated with a Web site displaying datareceived from the device for recording data regarding operationalaspects of the motor vehicle in conjunction with information related toa cost of insurance and operational aspects of the operation of othermotor vehicle and providing means for exploring how changing theoperational aspects would affect a cost of insurance.

FIG. 12 is a display screen associated with the Web site displaying triptime information summarizing data received from the device for recordingdata regarding one or more operational aspects of the motor vehicle inconjunction with average trip time summary information associated withother vehicles.

FIG. 13 is a display screen associated with the Web site displayingspeed information summarizing data received from the device forrecording data regarding one or more operational aspects of the motorvehicle.

FIG. 14 is a display screen associated with a Web site displaying tripdate information summarizing data received from the device for recordingdata regarding one or more operational aspects of the motor vehicle inconjunction with trip date summary information associated with othervehicles.

FIG. 15 is a display screen associated with a Web site displaying triplog information summarizing data received from the device for recordingdata regarding one or more operational aspects of the motor vehicle on aday-by-day basis.

FIG. 16 is a display screen associated with a Web site displaying triplog information summarizing data received from the device for recordingdata regarding one or more operational aspects of the motor vehicle on atrip-by-trip basis hand highlighting insurance cost or risk increasingevents.

FIG. 17 is a display screen associated with a Web site displayinginformation summarizing installation, disconnection and data transferevents related to the use of the device for recording data regarding oneor more operational aspects of the motor vehicle.

FIG. 18 is a block diagram of an exemplary embodiment of a device forrecording data regarding one or more operational aspects of a machine.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

The following terms and acronyms are used throughout the detaileddescription:

Internet. A collection of interconnected (public and/or private)networks that are linked together by a set of standard protocols (suchas TCP/IP and HTTP) to form a global, distributed network. While thisterm is intended to refer to what is now commonly known as the Internet,it is also intended to encompass variations which may be made in thefuture, including changes and additions to existing standard protocols.

World Wide Web (“Web”). Used herein to refer generally to both (i) adistributed collection of interlined, user-viewable hypertext documents(commonly referred to as Web documents or Web pages) that are accessiblevia the Internet, and (ii) the client and server software componentswhich provide user access to such documents using standardized Internetprotocols. Currently, the primary standard protocol for allowingapplications to locate and acquire Web documents is HTTP, and the Webpages are encoded using HTML. However, the terms “Web” and “World WideWeb” are intended to encompass future markup languages and transportprotocols which may be used in place of (or in addition to) HTML andHTTP.

Web Site. A computer system that serves informational content over anetwork using the standard protocols of the World Wide Web. Typically, aWeb site corresponds to a particular Internet domain name, such as“progressive.com” and includes the content associated with a particularorganization. As used herein, the term is generally intended toencompass both (i) the hardware/software server components that servethe informational content over the network, and (ii) the “back end”hardware/software components including any non-standard or specializedcomponents, that interact with the server components to perform servicesfor Web site users.

Referring now to the drawings, wherein the showings are for purposes ofillustrating the preferred embodiments of the invention only and not forpurposes of limiting same, the FIGURES show an apparatus and method formonitoring; recording and communicating insurance-related data fordetermination of an accurate cost of insurance based upon evidencerelevant to the actual operation and location of a machine inparticular, and the relative safety of that operation. Generally, a unitof risk, e.g., a vehicle or other machine, user or owner is charged forinsurance based upon statistical averages related to the safety ofoperation based upon the insurer's experience with other users who drivesimilar vehicles in a similar geographic area or use similar machines.

For example, based on this information, the insurer makes assumptionsabout how and where the machine will be operated. The invention allowsfor the measure of the actual operational machine data while the machineis being operated. Where the machine is a vehicle, such data measurementwill allow the vehicle user to directly control his/her insurance costsby operating the vehicle in a manner which he/she will know willevidence superior safety of operation and a minimal risk of generationof an insurance claim. Examples of data which can be monitored andrecorded include:

1. Actual miles driven;

2. Types of roads driven on (high risk vs. low risk); and,

3. Safe operation of the vehicle by the vehicle user through:

-   -   A. speeds driven,    -   B. safety equipment used, such as seat belt and turn signals,    -   C. time of day driven (high congestion vs. low congestion),    -   D. rate of acceleration,    -   E. rate of braking (deceleration),    -   F. observation of traffic signs.

4. Driver identification

With reference to FIG. 3, an exemplary motor vehicle is shown in whichthe necessary apparatus for implementing the subject invention isincluded. An on-board device 300 monitors and records various sensorsand operator actions to acquire the desired data for determining anaccurate cost of insurance. Although not shown therein, a plurality ofoperating sensors are associated with the motor vehicle to monitor awide variety of raw data elements. Such data elements are communicatedto the device 300 through a connections cable which is operativelyconnected to a vehicle data bus 304 through physical connector, such as,for example, an industry standard connector known as an SAE-1962 or OnBoard Diagnostic connector (e.g., ODBI, ODBII or in the near futureODBIII). Additionally, communications connections such as these may bemade wirelessly, such as, for example, with the wireless technologycurrently known as Bluetooth® (The Bluetooth word mark and logos areowned by the Bluetooth SIG, Inc). A driver input device 308 may also beoperatively connected to the device 300 through connector 307 and cable302. The device 300 is powered through the car battery 310, aconventional generator system, a device battery or a solar based system(not shown). A device battery may be included in the device 300 evenwhere main device power is drawn from the machine (motor vehicle). Forinstance, a device battery may provide power for a device clock, devicememory and/or allow the device to record connection and disconnectionevents. Tracking of the vehicle for location identification can beimplemented by the device 300 through navigation signals obtained from aGPS (global positioning system) antenna, a differential GPS or otherlocating system 312. The communications link to a central controlstation may be accomplished through the cellular telephone, radio,satellite or other wireless communication system 314. However, thewireless communications system 314 is not required.

FIG. 4 provides the block diagram of the in-vehicle computer system. Thedevice 300 is comprised of several principal components, such as anon-board data storage device, an input/output subsystem forcommunicating to a variety of external devices, a central processingunit and memory device and a real time operating kernel for controllingthe various processing steps of the device 300. It is known that all ofthese functions can be included in a single dedicated microprocessorcircuit. One embodiment of the device 300 is discussed in greater detailwith reference to FIG. 18. The device 300 essentially communicates withone or more machine or vehicle components for acquisition of informationrepresentative of various actual vehicle operating aspects orcharacteristics. A driver input console 410 may allow the driver toinput data for satisfaction of various threshold factors which need tobe satisfied. For instance, the console may allow the machine operatorto enter an identification number so that operational characteristicscan be recorded in association with a particular machine operator.Alternatively, the console may include a biometric sensor, such as, forexample, a finger print or retinal scanner for positively identifyingthe operator.

For instance, a driver authentication system is intended, such as whereseveral individual drivers (same family, etc.) may properly use thevehicle, but each may have different ratings for insurance computations.

The physical operation of the vehicle is monitored through varioussensors 412 in operative connection with the vehicle or machine databus, while additional sensors 414 not normally connected to the data buscan be in direct communication with the device 300 as will hereinafterbe more fully explained.

The vehicle may be linked to an operation control center 416 by acommunications link 418, preferably comprising a conventional cellulartelephone interconnection, but also comprising satellite transmission,magnetic or optical media, radio frequency or other known communicationtechnology. A navigation sub-system 420 may receive radio navigationsignals from a positioning device 422 which may include, but is notlimited to GPS, radio frequency tags, or other known locatingtechnology. If these elements are included, they may communicate withthe device 300 directly or via the data bus.

The type of elements monitored and recorded by the subject invention mayinclude raw data elements, calculated data elements and derived dataelements. For example, these can be broken down as follows:

Raw Data Elements:

Information from power train sensors

-   -   RPM,    -   transmission setting (Park, Drive, Gear, Neutral),    -   throttle position,    -   engine coolant temperature,    -   intake air temperature,    -   barometric pressure;

Information from electrical sensors

-   -   brake light on,    -   turn signal indicator,    -   headlamps on,    -   hazard lights on,    -   back-up lights on,    -   parking lights on,    -   wipers on,    -   doors locked,    -   key in ignition,    -   key in door lock,    -   horn applied;

Information from body sensors

-   -   airbag deployment,    -   ABS application,    -   level of fuel in tank,    -   brakes applied,    -   radio station tuned in,    -   seat belt on,    -   door open,    -   tail gate open,    -   odometer reading,    -   cruise control engaged,    -   anti-theft disable,    -   occupant in seat,    -   occupant weight;

Information from other elements

-   -   vehicle speed,    -   vehicle location,    -   date,    -   time,    -   vehicle direction,    -   IVHS data sources    -   pitch and roll,    -   relative distance to other objects.

Calculated Information:

-   -   deceleration;    -   acceleration;    -   vehicle in skid;    -   wheels in spin;    -   closing speed on vehicle in front;    -   closing speed of vehicle in rear;    -   closing speed of vehicle to side (right or left);    -   space to side of vehicle occupied;    -   space to rear of vehicle occupied;    -   space to front of vehicle occupied;    -   lateral acceleration;    -   sudden rotation of vehicle;    -   sudden loss of tire pressure;    -   driver identification (e.g., through voice recognition, code,        fingerprint or retinal recognition);    -   distance traveled; and    -   environmental hazard conditions (e.g. icing, etc.).

Derived Data Elements:

-   -   vehicle speed in excess of speed limit;    -   observation of traffic signals and signs;    -   road conditions;    -   traffic conditions; and    -   vehicle position.        This list includes many, but not all, potential data elements.

With particular reference to FIG. 1, a flowchart generally illustratinga data capture process within the vehicle for insurance and claimsprocessing is illustrated. Such a process can be implemented withconventional computer programming in the real time operating kernel ofthe device 300. Although it is within the scope of the invention thateach consumer could employ a unique logic associated with thatconsumer's machine or unit of risk, based on the underwriting and ratingdetermination (FIG. 6), as will be more fully explained later, FIG. 1illustrates how the data capture within a particular consumer logic isaccomplished. After the system is started 100, data capture is initiatedby a trigger event 102 which can include, but is not limited to:

-   -   Ignition On/Off    -   Airbag Deployment    -   Acceleration Threshold    -   Velocity Threshold    -   Elapsed Time    -   Battery Voltage Level    -   System Health    -   Date    -   Time    -   User Activation/Panic Button    -   Traction    -   Location/Geofencing    -   Driver Identification    -   Remote Activation

Trigger event processing 104 can comprise three elements: a flow processfor contacting a central control 106, contacting a claims dispatch,and/or recording trigger event data 110. Trigger event processing caninclude, but is not limited to:

-   -   Contact External Entities    -   EMT (Emergency Medical Transport), Claims Dispatch, Other        External Entity Takes Appropriate Action    -   Record Sensor Information    -   Transmission of Data    -   Recalibration    -   Load Software

If trigger event processing comprises contact central control, theinquiry is made, and if affirmative, the central control is contacted112, the central control can take appropriate action 114, and a recordis made of the action taken by the central control 116.

For the process of claims dispatch 108, the system first contacts 120the claims dispatch service department of the insurer, the claimsdispatch takes appropriate action 122 and a recording 124 of the claimsdispatch action information is made.

The recording of trigger event data can include, but is not limited to:

The Trigger

Location information such as latitude and longitude

Time, such as, Greenwich Mean Time

Velocity

Acceleration

Direction

Deceleration

Vehicle Orientation

Seatbelt Status

Data capture processing concludes with end step 130.

The recording may include monitoring a plurality of raw data elements,calculated data elements and derived data elements as identified above.Each of these is representative of an operating state of the vehicle oran action of the operator and therefore, represents an operationalaspect of the machine. Select ones of the plurality of data elements arerecorded when the ones are determined or believed to have an identifiedrelationship to the safety standards. For example, vehicle speed islikely to be related to safety. Therefore, speed may be recorded on aregular basis (e.g. every 10 seconds). Alternatively, where memory orstorage space is a factor, speed may be recorded less often when it isbelow a threshold. The recording may be made in combination with date,time and/or location information. Other examples of data that may berecorded are excessive rates of acceleration or hard braking(deceleration) events. These may be calculated data elements determined,for example, from speed measurements made every second or can bemeasured data elements received directly or indirectly from one or moreaccelerometer of the vehicle.

The recording process is practically implemented by monitoring andstoring the data in a buffer for a selected period of time, e.g., thirtyseconds. Periodically, such as every two minutes, the status of allmonitored sensors for the data elements is written to a file which isstored in the vehicle data storage within the device 300. The raw,calculated and derived data elements listed above comprise some of thedata elements to be so stored. Only those data elements determined ordeemed to be most relevant by the insurer need be stored.

Some “trigger events” can be a combination of sensor data possiblyrequiring additional action or which may result in a surcharge ordiscount during the insurance billing process. In some embodiments,certain trigger events may trigger immediate upload 106 to a centralcontrol which will then take appropriate action 114. For example, arapid deceleration in combination with airbag deployment may be atrigger event indicating a collision, in which case the system couldnotify the central control of the vehicle location and status.Alternatively, if the operator were to trigger on an emergency light,similarly the system could notify the central control of the vehiclelocation indicating that an emergency is occurring.

Trigger events can be divided into two groups: those requiring immediateaction and those not requiring immediate action, but useful fordetermining a cost of insurance. Those useful for determining the costof insurance can be recorded in the same file with all the otherrecorded vehicle sensor information. Those trigger events requiringaction can be uploaded to a central control center which can take actiondepending on the trigger event. Some trigger events can indicate thedispatch of emergency services, such as police or EMS, and others willrequire the dispatch of claims representatives from the insurancecompany.

The following comprises an exemplary of some, but not all, triggerevents:

Need for Assistance:

These events could require immediate notification of the central controlcenter.

-   -   1. Accident Occurrence. An accident could be determined through        the use of a single sensor, such as the deployment of an airbag.        It could also be determined through the combination of sensors,        such as a sudden deceleration of the vehicle without the        application of the brakes.    -   2. Roadside assistance needed. This could be determined through        the pressing of a “panic button” in the vehicle or through the        reading of a sensor, such as the level of fuel in the tank.        Another example would be a rapid loss of tire pressure,        signifying a flat tire.    -   3. Lock-out assistance needed. The reading of a combination of        sensors would indicate that the doors are locked, but the keys        are in the ignition and the driver has exited the vehicle.    -   4. Driving restrictions. The insured can identify circumstances        in which he/she wants to be notified of driving within        restricted areas, and warned when he/she is entering a dangerous        area. This could be applied to youthful drivers where the parent        wants to restrict time or place of driving, and have a record        thereof.

Unsafe Operation of the Vehicle

These events could be recorded in the in-vehicle recording device forfuture upload. Constant trigger events would result in notification ofthe driver of the exceptions.

-   -   1. Excessive speed. The reading of the vehicle speed sensors        would indicate the vehicle is exceeding the speed limit. Time        would also be measured to determine if the behavior is        prolonged.    -   2. Presence of alcohol. Using an air content analyzer or breath        analyzer, the level of alcohol and its use by the driver could        be determined.    -   3. Non-use of seatbelt. Percent of sample of this sensor could        result in additional discount for high use or surcharge for low        or no use.    -   4. Non-use of turn signals. Low use could result in surcharge.    -   5. ABS application without an accident. High use could indicate        unsafe driving and be subject to a surcharge.

With particular reference to FIG. 2, a general block diagram/flowchartof the network design for gathering appropriate information forinsurance billing on a periodic basis is illustrated. Each machine orunit of risk 200, which as noted above, can just as easily be a factoryor farm machine, an airplane or boat, as well as a motorcycle orautomobile, includes the data storage 202 and data process logic 204 asdescribed more in detail in FIG. 4. As will be described in greaterdetail with reference to FIG. 7-FIG. 17, the insured or potentialcustomer 206 associated with or responsible for each unit of riskcommunicates within the insuring entity 208 or its designee (by“designee” is meant someone acting for the insurer, such as a dedicateddata collection agent, data handler or equipment vendor 210 and/or avalue added service provider 212.) The data handler can be a third partyentity verifying that the operating equipment of the system is in properworking order and, as such, will usually be a subcontractor to theinsurer. A value added service provider is another third party entity,such as a directional assistance service, a security firm, a vehiclemonitoring company or telephone service provider, also apart from theinsurer, whose communications with the units of risk may be important oruseable to the insurance computation algorithms.

Another important feature of FIG. 2 is that the insured or potentialcustomer 206 may not only communicate with the insurer 208 through thecommunications link 418 (FIG. 4), but preferably through an Internet 218communications path after reviewing recorded information. Suchcommunication will occur through a Web server 220 and the insurer's Website so that an insured or potential customer 206 may get on-line withthe insurer 208 to observe and verify recorded data, claims processing,rating and billing 222, as well as acquire improved insurance costestimations and information regarding how to reduce or control insurancecosts by modifying machine or vehicle operating behaviors, as willhereinafter be more fully explained.

With particular reference to FIG. 5, a more detailed description ofsystem use of data acquired from the unit of risk is explained withparticular attention to advantageous Internet communications. The unitof risk 200 (device 300) is primarily concerned with transferring threeclasses of data between it and the insurer. The event data 500 andstored sensor data 502 have been discussed with reference to FIG. 1.Data process logic 504 is particular processing logic that can betransferred from the insurer to the unit of risk that is adapted foracquiring data especially important for assessing the particular unit'sinsurance costs. For example, if a particular unit has a special needfor providing information about brake pedal application, special dataprocess logic will be provided to that unit to store data related tothis activity. On the other hand, for many other units such data may notbe necessary and so the unit may operate with standard data processlogic 204. The important feature of special data process logic 504 isthat the data process logic 204 for a unit of risk can be regularlyupdated as either the insured or potential customer or the insurerdesires, or as events warrant. One easily foreseeable special dataprocess logic would be related to breathalyzer analysis.

The process flowchart starting at Begin 506 more generally describes thecommunication activity between the insurer and the unit of risk. Theinsurer will acquire event data 508 and sensor data 510, may update 512the data process logic and then process 514 the raw data elements togenerate either the calculated or derived data elements.

Alternatively, the device 300 processes raw data elements to generatethe calculated and/or derived elements and stores them for upload anddisplay along with raw data elements. All relevant data is stored 516 ina conventional data storage device 518. If the stored item is an event524, then the insurer may generate some sort of response to the event.For example, if there is an airbag deployment and the data is deliveredin real time, the insurer may actually try to communicate with thevehicle, and upon failure of communication, may initiate deployment ofemergency medical or police service. If this specific event processingand/or alerts 526 occurs, the system may initiate a charge per useevent. For instance, charges can also include immediate response claims,EMS contact charges or police dispatch charges. The data or events whichare stored in stored device 518 are accessed by a billing or estimatingalgorithm 530 to generate a cost of insurance for the unit of risk inconsideration of all the relevant data and events occurring which arerecorded and stored in the storage device. It can be a special featureof the subject invention that the cost of insurance for a given periodis determined, at least in part, on the basis of operatingcharacteristics of the vehicle and operator action recorded during thatsame period, and may be based upon the real time data occurringcontemporaneously with the billing so that the system provides aninsurance use cost, as opposed to an estimation based upon historicaldata. Alternatively, customized discounts or surcharges are determinedfor a next or future billing period based on operational aspects orbehaviors represented by recorded information provided for the currentor previous billing period. After a relevant cost is computed, a bill orestimate is produced and typically mailed or otherwise communicated to acustomer as an account statement 534 or offer of insurance.

Another important feature of the subject invention illustrated in FIG. 5and explained in greater detail in reference to FIG. 10-FIG. 17, is thatthe insurer provides a Web server 220 to allow a customer to access viaInternet 218 communication, the relevant sensor data and event dataassociated with the customer.

Two different types of on-line services' interfaces are illustrated: aprospective on-line services interface 550, or an interface 552 forreporting acquired data. The data reports through the acquired serviceinterface may comprise all of the stored event and sensor data, alongwith enhanced processing maps showing travel routes during the billingperiod, or even a map showing current location of the unit of risk. ByGeofencing is meant to identify when the unit travels outside of acertain geographical area. It is even possible to determine whetherautomobile maintenance service is appropriate by diagnostic analysis ofthe sensor and event data.

The prospective interface relates to “what if” gaming where a customercan project certain usages of the unit of risk or driver actions, andthe system can, in combination with similar occurring usage in the past,or based upon the overall customer profile or matrix, project aestimated cost for such usage. In effect, a user can determine, inadvance, what particular usage of the unit or driver action willgenerate an insurance cost or savings with a very reliable associatedinsurance estimate.

Lastly, enhanced account statements 554 can also be communicatedon-line, wherein maps with usage or service usage details can beprovided as a more detailed explanation of the resulting costs of anaccount statement.

With particular reference to FIG. 6, the subject invention isparticularly useful for generating improved rating determinations due tothe improved acquisition and amount of relative data for assessinginsurance costs for a unit of risk. In the manner as discussed above,the database 518 has the benefit of the data from a plurality ofcustomers and non or potential customers 206 and otherdrivers/operators. Over time, an insurer can use the accumulatedunderwriting and rating information from individual customers 520 todevelop improved rating algorithms 522, 530 and databases 518. Suchimproved algorithms can be regularly communicated to the units of risk200 for improved insurance cost computation accuracies. The improvedrating algorithms can be communicated 524 to the units of risk on-boarddevice 300 (FIG. 4).

The subject invention is also applicable as a process for collectingdata to be used for the following insurance and non-insurance relatedpurposes: advertising and marketing; site selection; transportationservices; land use planning; determining road design, surface orcomposition; traffic planning and design; and road conditions.

For example, referring to FIG. 7, a method 714 for underwritinginsurance related to the operation of a machine associated with a partyincludes determining 718 a level of willingness of the party to allow atleast one aspect of machine operation to be recorded, providing 722 adevice for recording the at least one aspect if the party is willing toallow the at least one aspect to be recorded, assigning 726 a level ofrisk to the operation of the machine based at least in part on theindicated level of willingness of the party or operator to allow the atleast one aspect to be recorded, determining 730 whether or not to offerinsurance for the machine to the party based on the assigned level ofrisk and setting 734 a price for the insurance based on the assignedlevel of risk if the determination is made to offer insurance. It shouldbe noted that, since the price or cost of insurance is set 734 based onthe assigned 726 level of risk and the level of risk is assigned 726based at least in part on the indicated level of willingness of theparty or operator to allow the at least one aspect to be recorded,included within the method 714 for marketing insurance is a method fordetermining a cost of insurance directly related to the operation of aspecific machine by the insurance applicant. Furthermore, aspects of themethod 714 for underwriting and pricing insurance, such as thepresentation of cost and other information, as will be described ingreater detail below, can influence machine operator behavior.Therefore, aspects of the method 714 for marketing comprise a method formodifying operator or driver behavior and/or for controlling insurancecost.

Determining 718 the level of willingness of a party to allow at leastone aspect of machine operation to be recorded can be achieved a numberof ways. For example, if an unsolicited request for the device (e.g.300) for recording is received, it may indicate a relatively high levelof willingness or enthusiasm for allowing at least the one aspect ofmachine operation to be monitored or recorded. Over time, it may bedetermined that machine operators or owners who are not currentlycustomers of an insurer, but who request the device for recording, aremore enthusiastic or have a higher level of willingness to have the atleast one aspect of their machine operation monitored than, for example,current customers of the insurer who request the device. For instance,it may be determined that current customers have ready access to contactinformation and can request the device with less effort (implying alower enthusiasm threshold than a non-customer). Receiving a request forthe device after making an offer to provide the device, may indicate asimilar level of willingness or may indicate a somewhat diminished levelof willingness. Again, someone responding to an offer has an easierroute to receiving the device than someone who has not received an offerand requests the device at his own initiative.

It is assumed that a level of willingness to have an aspect of machineoperation monitored may be related to a manner in which the machine isnormally operated. For instance, it is assumed that automobile driverswho believe themselves to be careful automobile drivers would be or aremore willing to have an aspect of their driving, such as, for example,the speed at which they drive, monitored and that those who are awarethat others would consider them reckless would be less willing to havean aspect of their driving monitored. However, these assumptions mayinaccurate. Over time, an insurer can accumulate a database (e.g., 518)including information correlating the degree of willingness (orunwillingness) to allow recording or monitoring, as well as dataregarding the at least one aspect of operation, with a level of risk forvarious categories of parties.

Of course, parties that actually use the device (e.g. 300) for recordingthe at least one aspect of machine operation indicate a greaterwillingness to allow one or more aspects of machine operation to berecorded than do those who merely request the device, but do notthereafter actually use the device. Again, it is assumed that thoseparties that install the device and allow it to record one or moremachine operation aspects are more likely to be careful machineoperators than are those who do not. Furthermore, those who review therecorded information to determine, for example, if they are indeed ascareful as they believe they are, express a greater willingness to allowthe monitoring and are likely to be among the most careful drivers.Those who actually provide the recorded information to the insurerexpress an even greater willingness to be monitored and are likely to bethe most careful machine operators of all.

Of course, all of these assumptions about a relationship between theseexpressions of willingness to allow at least one aspect of machineoperation to be recorded are subject to verification and adjustmentbased on data collected correlating actual insured losses of insuredparties associated with insured machines and the level of willingness toallow monitoring expressed by the insured parties (or, non-customers whoprovide data for estimation purposes) associated with the losses andothers in related actuarial classes.

As explained above, a level of risk assigned or associated with a partyand/or the operation of a machine associated with the party can be basedon many factors, such as the sex, age, marital status, and address of aninsured party or machine operator. Assigning 726 a level of risk to theoperation of the machine based at least in part on the indicated levelof willingness to allow the at least one aspect to be recorded can alsobe accomplished in conjunction with assigning a level of risk based onthese known factors.

Additionally, assigning 726 a level of risk to the operation of themachine can include an evaluation of data recorded by the device (e.g.,300), or a copy thereof, received from the party associated with themachine. For instance, where the machine is a vehicle, such as anautomobile, truck, motorcycle, boat or airplane, the at least onerecorded aspect of machine operation might include speeds at which thevehicle was operated, acceleration events, deceleration events and/orlocations where the vehicle was operated, as well as seat belt usage,turn signal usage and the times and dates of vehicle usage. One or moreof these aspects of machine operation, either alone or in combinationwith one or more of the previously identified characteristics (such asoperator age, sex or location) can be compared with assumptions aboutsafe operation determined by the insurer or with actuarial dataaggregated from copies of similar data previously received from otheroperators or owners of similar machines and stored in a database (e.g.,518) of the insurer. The results of such comparisons are used inassigning 726 a level of risk to the operation of the machine by theassociated operator or owner.

For instance, if the evaluation of data received from the device 300 ofa party indicates that a relatively high percentage of vehicle operationis done at a speed deemed to be unsafe by the insurer, based either onpractical assumptions or actuarial evidence, the operator and/or machinemay be placed in or assigned a high risk category. Additionally, oralternatively, if the recorded at least one aspect indicates arelatively large number of aggressive accelerations and/or decelerationsfor a number of miles driven, the operator and/or vehicle/operatorcombination may be assigned a high risk category or actuarial tier.Again, previously known actuarial parameters may be used in evaluatingthe at least one recorded operational aspect. For instance,location-based actuarial data may indicate that even the safest class ofdrivers perform rapid decelerations frequently in an urban setting ascompared to safe drivers in rural locations. Therefore, allowances mightbe made or varied based on location or other factors. For instance,where location information is unavailable, a location type may beinferred from data that is available. For example, data may be stored orprocessed in relation to trips. A trip starts when the ignition of thevehicle is turned on and ends when the ignition of the vehicle is turnedoff. If a high percentage of the recorded trips are short (i.e., belowsome threshold distance and/or time), then it might be inferred that thevehicle is garaged in an urban environment or is used mostly for citydriving. Of course, the speed at which the vehicle is driven during theshort trips may also be a factor in making such inferences.

Data validation or verification can also play a part in assigning 726the level of risk and/or in setting 734 the price or cost of insurance.For instance, the device 300 can log vehicle identification information(e.g. vehicle identification number (VIN) or network protocolinformation) whenever the device is installed in a motor vehicle. Atleast some of this information is available from the vehicle network andcan be received and logged by the device 300. Additionally, where thedevice 300 or machine include a console for entering operatoridentification information (e.g. code numbers, I.D. cards, biometricscans), this information can also be received and logged by the device300. Where the device 300 or vehicle include, or are in communicationwith, location determining equipment (e.g., G.P.S. or cellulartriangulation), this information can also be recorded by the device.This recorded information can be compared against information providedearlier by the party. For instance, a recorded VIN can be compared to avehicle description provided by the party during an insuranceapplication filing procedure. Similarly, location information recordedby the device can be compared against “garage location” informationprovided in a policy renewal form. Operator identification and vehiclemileage information can be compared against operator lists and mileageestimates provided in policy application forms.

Data provided by the party that is found to be incorrect may simply becorrected and the recorded data used in assigning 726 risk for setting734 prices or costs. Alternatively, or additionally, the fact thatincorrect data was provided by the party may be factored into thosecalculations. For example, certain incorrect data may be a flag forfraud and may place the party in an uninsurable underwriting class or ina higher risk tier.

The assigned 726 level of risk can include one or both of anunderwriting tier and an insurance rate and can be used to determine 730whether or not to offer insurance covering the machine. Alternatively,whatever the level of risk assigned 726, insurance can be offered andthe level of risk assigned 726 is reflected in the price set 734 for theinsurance.

The marketing method 714 can be applied toward current customers of aninsurer or to parties and machines not currently covered by insuranceplans of the insurer.

For instance, non-customers, current or continuing customers or insuredparties of an insurer may be provided with means to review recorded dataregarding one or more aspect of operation of a machine associated withthe customer or non-customer, on a regular basis, at policy renewal timeor while the potential customer is evaluating potential insurers. Inreviewing the recorded data, the current or ongoing customer and/orpotential or non-customer indicates a particular level of willingness toallow the aspect to be recorded. Furthermore, after such reviews, orinstead of them, the current or ongoing customer or the non-customer maytransmit the recorded data to the insurer for the insurer to review andanalyze in determining a price of future or past insurance coverage. Forexample, a retroactive discount may be applied to an insurance premiumassociated with the period for which the data was recorded.Alternatively, assumptions may be made about future machine operationbased on the past performance indicated by the recorded data and adiscount or surcharge may be applied to one or more upcoming periods ofinsurance. Non-customers may be provided estimates or offers ofinsurance that include pricing information based on the fact that thenon-customer used the provided means to review recorded machineperformance data. Where a current customer contracts for insurance on aprepaid per mile (or kilometer) or per minute (or other unit of time)basis, the provided means for reviewing the recorded data can be used todetermine and display a number of miles or number of minutes remainingfrom the prepaid amount. Furthermore, based on the amount of drivingindicated by the recorded data, the means for reviewing the recordeddata may also provide an estimate for when the total prepaid insuranceamount will be consumed. This allows the prepaid customer to plan orbudget for making a new prepayment to “re-charge” their pre-paid insuredminutes or miles account.

Furthermore, decisions about insurance levels and insurance periods maybe based on the determined 718 level of willingness to allow the atleast one aspect of machine operation to be recorded and on recordeddata (or copies thereof) if they are received from the insured party.These determinations may be considered to be part of the determination730 as to whether or not to offer insurance. For example, it may bedetermined 730 that a machine or machine operator is associated with orassigned 726 a risk level or underwriting tier that is too high toaccept for a twelve month period, but may represent an acceptable riskfor a three or six month period. For instance, the party may currentlybe a non-customer of the insurer. The non-customer may have requested adevice for recording the at least one aspect of machine operation,installed the device and recorded the at least one aspect of machineoperation for an extended period of time and then transmitted oruploaded the recorded information to the insurer. It may be assumed, orit may be supported by actuarial information, that all of these actionsindicate that the operator is responsible, sober and careful.Nevertheless, the uploaded data may indicate that, for example, avehicle of the non-customer was regularly driven at excessive speedand/or with overly aggressive accelerations and decelerations. For thisreason, the insurer may be unwilling to commit to insuring thenon-customer for an extended period of time, but may be willing tounderwrite the operation of the machine by the non-customer for ashortened trial period in anticipation that a review of the recordeddata by the non-customer and consideration of information regarding howthe current non-customer could reduce a cost of insurance by modifyinghow the current non-customer operates the machine would in fact causethe current non-customer to modify machine operation behaviors, therebyaffecting a reassignment 726 to a reduced risk level or underwritingtier or classification. Based on such a future reassignment, the insurermay determine 730 to underwrite or insure the machine operation for thenew customer for a longer period of time and/or set 734 a lower pricefor the coverage.

The behavior modifying and/or cost controlling aspects of the method 714for marketing insurance may include providing a means for the party toreview recorded information regarding the at least one aspect of machineoperation. For instance, the provided means for reviewing the recordedinformation may present the recorded information in conjunction withinformation indicating how the recorded information, if provided to theinsurer, would affect the cost of insurance.

For example, the insurer may provide the party (customer ornon-customer) with display software that can be run on a home computer.The display software may allow the party to upload or transfer therecorded information, or a copy thereof, from the device 300 to the homeor personal computer or work station of the party. The display softwaremay present all of the recorded data or selected summary information.For instance, a graph may be provided on a trip by trip basis showingthe recorded speed of a vehicle, distance traveled and/or the durationof the trip, on a minute by minute or other time related basis.Alternatively, the display software may present summary informationindicating a percentage of time the vehicle was operated withinparticular speed ranges, at high risk or low risk locations (routes) ortimes, with overly aggressive accelerations or decelerations orsummaries of any other aspects of machine operation that may be deemedof interest by the insurance provider. As explained above, other aspectsthat may be deemed of interest and therefore recorded by the device 300include turn signal use, seat belt use, vehicle roll, vehicle yaw,entertainment system on or off status, radio or television station,compact disc or DVD being played, telephone use, convertible top up ordown status and/or tire pressure to name but a few. Where the machine isa piece of factory equipment, various line speeds, operating pressures,safety gate status, temperatures and/or operator run times are amongaspects that might be selected for recording, display to the party anddelivery to the insurer. Temperatures, pressures, and speeds are alsoamong parameters or aspects of operation that might be recorded,displayed to the party and transmitted to an insurer with regard to theoperation of farm equipment. Furthermore, machine configurationinformation (e.g., harvester, plow, planter or other configurations) maybe recorded, displayed to the party and transmitted to the insurer.

Preferably, the means for the party to review the recorded informationincludes a means for reviewing the recorded information in conjunctionwith information indicating how providing the recorded information tothe insurer would affect the cost of insurance. For example, thesoftware may display summary information regarding the recordedinformation in conjunction with a message indicating that a five percentdiscount would be applied to a premium associated with the party if thedata were transmitted to the insurer or a service provider of theinsurer. Additionally, or alternatively, the software package mayindicate or highlight portions of the recorded information that qualifythe party for additional discounts. Portions of the recorded data thatwould be associated with surcharges or reductions in discounts mightalso be highlighted and explained. Furthermore, the means for the partyto review the recorded information may allow the party to manipulate ormodify the displayed data in order to learn how changing operationalbehavior would affect the cost of insurance in the future. For example,where the recorded data indicates that the highest speed at which avehicle was driven was 80 miles an hours and that driving at 80 miles anhour has an adverse effect on the available discount to an insurancepremium, the means for the party to review the recorded information, ordisplay software, allows the party to change the maximum speed value to75, 70 and/or 65 for “what-ifing” purposes and observe associatedincreases in the available discount, or reduction of a surcharge, thatwould be applied to a future cost of insurance should the party reducethe maximum speed at which the vehicle is operated in the future.

In some embodiments, providing a means for the party to review recordedinformation regarding the at least one aspect of machine operationincludes providing a means for comparing the operational behavior of theparty with the operational behavior of other parties. For instance, therecorded data of the party can be compared with an average or aggregateset of data from other parties who have provided operational data to theinsurer in the past. Comparison can be made to an average or aggregateof all parties who have uploaded data, an average or aggregate of dataprovided by operators with similar characteristics (e.g. age, sex,location), an average or aggregate of data provided by partiesassociated with similar machines (same model car, same model millingmachine, same size heat treating furnace, same model tractor or samemodel combine) or a combination of any of any of these classificationsor others.

In some embodiments, providing a means for the party to review recordedinformation regarding the at least one aspect of machine operation caninclude providing a means for transferring the recorded information, ora copy thereof, from the device 300 configured to receive and recordinformation to a device configured to display at least a portion of therecorded information. For example, providing a means for transferringthe recorded information, or a copy thereof, can include providing acable for connecting the device 300 to a communications port (e.g., andRS-232, USB port or a parallel port) of a home computer, programmabledigital assistant or other computation platform. Alternatively, themeans for transferring a copy of the recorded information from thedevice 300 to the display device can include providing a wirelessconnection. For example, the device 300 may include means for wirelesscommunication, such as for example, Bluetooth® or other wirelessnetworking or communications technology. A compatible device is providedfor installation in the home computer, work station or personal digitalsystems (display device). Where the display device can be brought to themachine (e.g., motor vehicle), connection to the display device (e.g.,with a cable) can be made while the device 300 is attached to themachine. For example, a cable can be connected between a personaldigital assistant or laptop computer and the device 300 while the device300 is connected to an OBDII connector in an automobile.

Alternatively, if the device 300 includes a wireless communicationstechnology (e.g. Bluetooth®), a connection between the device 300 andthe display device can be made even when the display device ispositioned somewhat remotely from the device 300 configured forreceiving and recording the at least one aspect of machine operation.For example, a device 300 included in an automobile may be able toestablish a connection with a home computer when the vehicle is parkedadjacent to a home housing the home computer. For instance, anautomobile parked in the driveway or garage of the home may be withinrange of the wireless technology and a connection for transferring acopy of the recorded information from the device 300 to the displaydevice may be established.

Alternatively, the device 300 for receiving and recording information isremoved from the machine and connected to the display device. Forinstance, on a regular basis (e.g., monthly, quarterly, or yearly) theparty removes the device 300 from the machine and places it incommunication with a display device. For instance, a wireless or wiredconnection is established between a personal computer or othercomputational platform and the device 300 configured for receiving andrecording data. Once the connection is established between thecomputational or display device and the device 300 configured forreceiving and recording data, some or all of the recorded data can betransferred or copied to the display device and the data can bedisplayed, processed, manipulated, analyzed and compared to other dataas explained above. Preferably the data is recorded in the device 300for receiving and recording data in an encrypted form. In that case,software included in the display device or personal computer includes adecryption algorithm. The data is stored and transferred to the displaydevice in encrypted form in order to prevent or discourage datatampering.

In yet another alternative, only a portion of the device 300 is removedfrom the machine to provide the means for transferring the recordedinformation, or copy thereof, from the device 300 to the display device.For example, the device 300 includes a removable memory card or stick.The recorded data is stored on the removable storage element. The deviceconfigured to display at least a portion of the recorded informationincludes or is associated with a memory or removable storage elementreader. The removable storage element is removed from the device andplaced in communication with the reader. The reader reads informationfrom the removable element. Optionally, the removable element is erased.The removable element may be reinstalled in the device 300 and used torecord more information. Alternatively, the removable element is noterased. Instead it is stored for archival purposes and a replacementremovable storage element is installed in the device 300. Of course,memory cards and sticks are only exemplary removable elements. Otherdevices may be used. For example, floppy disks and recordable compactdisks and digital video disks can be used as removable memory or storageelements.

After reviewing the data, or without reviewing the data, the party mayselect or decide to transmit the data to the insurer. For example, theparty may be rewarded with a discount for insurance for merely uploadingor transmitting the data to the insurer. Additionally, the data mayindicate that the insured party is entitled to additional safe operationdiscounts. The means for reviewing the data can include a means fortransmitting or uploading the data to the insurer. Upon receiving andreviewing the data, the insurer applies the appropriate discounts and/orsurcharges to the cost of insurance for the party. If the party is anon-customer, the cost of insurance is exemplary and is transmitted tothe non-customer as an estimate for comparison purposes.

In some embodiments, data is stored in two forms in the device 300 forreceiving and recording data. The first form is a first encrypted formfor communication with the display device. The second set of data isencrypted by a second means or an additional encryption means. Thesecond set of data is for transmission to the insurer. The encryptionschemes are used to thwart and/or discourage attempts to modify orfalsify the information on which insurance costs or charges are based.

The provided means for the party to review the recorded information canbe completely local (i.e., installed locally on the parties personalcomputer or computing platform), can be entirely remotely based (e.g.installed on a remote computer or server and communicated with over atelephone or internet link) or can be distributed among a plurality ofplatforms. For example, a preview portion can be installed and runlocally on the computing platform of the party, while a more thorough ordetailed display function is provided by a remote server such as, forexample, a Web page server.

Some parties may be reluctant to provide information to the insurerwithout first determining that the provided information will result in asignificant savings in the cost of insurance. Providing the means forthe party to review recorded information in two portions, the firstportion on their own computer and the second portion based in the serverof the insurer or a third party service provider of the insurer, allowsthe party to review the data in confidence, knowing that the data willnot be transmitted or provided to the insurer until or unless the partydecides that it is appropriate to do so. Providing some of the datareviewing functionality from a Web site of the insurer provides an addedincentive to upload or transmit the recorded data to the insurer.

For example, referring to FIG. 8, preview software running, for example,on a personal computer provides a driving summary display 814. Thedriving summary display 814 includes a policy discount section 818, agraphical operating performance section 822 and a numerical operatingperformance section 826. Clicking an upload button 830 would authorizethe display software to transmit encrypted data from the device 300 to acomputer or server of the insurer or a third party service providerthereof. For instance, the preview software would transmit the data viaan interne or telephone based connection.

In the exemplary embodiment, the preview software is adapted for asystem wherein the provided 722 device 300 is plugged into the machine(e.g., a vehicle) for data logging purposes and disconnected from themachine for connection to the display device and for data uploading tothe insurer. Therefore the numerical performance display section 826includes a logging start time stamp 832, a logging stop time stamp 834and a percentage of time connected parameter 836. The start and stoptime stamps 832, 834 indicate the period for which the summarized datais associated. The percentage of time connected parameter indicates howfaithfully the device 300 was used during that period. For example, ifthe percentage of time connected 836 is relatively low, it may indicatethat the device 300 was disconnected and unable to record any aspect ofmachine performance during periods of time when the machine was operatedin an unsafe manner. A relatively high value for the percentage of timeconnected parameter clearly indicates that the presented data is trulyrepresentative of the monitored at least one aspect of machineperformance. In some embodiments, the percentage of time connectedparameter 836 may be included as a factor in determining 718 the levelof willingness of the party to allow the at least one aspect of machineoperation to be recorded and may thus have underwriting and ratingsignificance. For example, a low value for the percentage of timeconnected parameter may indicate a low level of willingness to have theat least one aspect recorded and be associated with a higher level ofrisk and therefore, a reduced or eliminated discount. Of course, inembodiments where the data log comprises a removable memory or storageelement, the percentage of time connected parameter 836 is in referenceto the removable memory element and/or the device as a whole.

The numerical driving performance section 826 also displays summaryinformation related to the recorded parameters received from the device300. Where appropriate, the information is presented on an annualizedbasis. For instance, the logging start and stop parameters 832, 834indicate that the summarized data was collected over a period of 31days. The display software projects machine use or mileage estimatesbased on the 31 day logging period. The projections can be based simplyon the ratio of recorded days versus the number of days in a year or canbe more sophisticated, seasonally adjusted figures.

For instance, the preview display software projects an annual daytimemileage of 14,958 miles based on the number of miles recorded in the 31day period. Additionally, the preview software displays a nighttimemileage projection 840 of 113 miles and a high risk mileage projection842 of 0 miles

Additionally, the numerical performance display 826 includes indications844, 846, 848 that the vehicle is driven above 75 miles per hour 0.02percent of the time, aggressively accelerated 16.8 times per 100 milesdriven and was aggressively braked or decelerated 3.1 times for every100 miles driven.

The graphical operational performance section 822 displays these sameparameters 838-848 as bar charts in relation to average or nominalvalues 850, thereby allowing the operator to compare his or heroperating habits to other machine operators or drivers.

In the exemplary embodiment, the discount section 818 of the operationalsummary 814 indicates that a total discount 852 is based upon acalculation including an upload bonus 854, a rating factor, such as asafety score 856 and a usage discount 858. Current customers can applythe total discount 852 to a base premium amount known to them todetermine a cost of insurance. Non-customers can apply the discount to abase cost presented in an insurance quote already provided to them orwill receive a cost of insurance notification after the non-customeruses the upload button 830 to transmit the recorded data from the device300 to the insurer.

In the exemplary embodiment, an upload bonus 854 is a discount appliedto determine or set 734 a cost of insurance for those determined 718 tohave a level of willingness to allow one or more aspects of machineoperation to be monitored associated with actually uploading,transmitting or otherwise providing recorded data to the insurer. Other(e.g., lesser) discounts may be provided or set 734 to those who aredetermined 718 to have a level of willingness associated with using thepreview software to review their performance, but that chose not totransmit the recorded data to the insurer. A still lesser discount mightbe provided or set 734 for those who request and install the device 300,but do not review the data or transmit it to the insurer. Alternatively,any determined 718 level of willingness less than that associated withtransmitting the data to the insurer may indicate or be assigned 726 alevel of risk associated with setting 734 no discount, or even asurcharge.

The safety score 856 and usage discount 858 are explained in otherscreens or windows.

Referring to FIG. 9, a safety score display 914 includes a safety scoreexplanation section 918. Additionally, the safety score display 914includes the discount summary 818 and graphical performance section 822.

The safety score explanation section 918 indicates the safety score is afunction 920 of an excessive speed factor 922, an aggressiveacceleration factor 924 and an excessive braking factor 926. A helpwindow 930 may further explain, for example, that the excessive speedfactor 922 starts out at a value of 2.0, but is reduced by 1 for every1.5 percent of driving done at a speed over 75 miles per hour. The helpwindow 930 might also explain that the aggressive braking factor 926also starts at a value of 2 and is reduced by ⅙ times the number ofobserved aggressive braking events observed normalized to a per 100miles driven basis. The help window 930 might also explain, for example,that the aggressive acceleration factor 924 starts out at a value of2.0, and is reduced at a rate of 1/14 times the number of aggressiveacceleration events recorded in the device 300 normalized to a per 100miles driven basis.

The safety score explanation window 918 indicates that the safety scoreis a weighted function 920 of the factors 922, 924, 926.

Referring to FIG. 10, in the exemplary embodiment, a usage discountdisplay 1014 includes a usage discount detail section 1018. The usagediscount display 1014 also includes the discount summary display 818 andthe graphical operation performance section 822.

The usage discount detail section 1018 indicates that the usage discount1022 is a function of a starting discount 1024, and rating factors, suchas, a daytime mileage adjustment 1026, a nighttime mileage adjustment1028 and a high risk mileage adjustment 1030.

The help window 930 might explain that the usage discount 1022 starts atthe value of the starting usage discount 1024, but is reduced in valueby each of the adjustment values 1026-1030. For example, the startingusage discount might be 10 percent. The usage discount 1022 is adjusteddownward based on the number of annualized miles driven during the day,driven during the night and/or classified as high risk. Daytime milesmight, for example, be defined as miles driven between the hours of 5a.m. and 10 p.m. local time. Miles driven between the hours of 10 p.m.and 5 a.m. Monday-Friday might be classified as nighttime miles. Milesdriven during the hours of 12 a.m. to 4 a.m. on Saturday and Sundaymight be classified as high risk miles.

The help window 930 might also explain that the daytime adjustmentreduces the starting usage discount value by 1 percent for every 1000miles driven beyond 7250 miles per year. Miles driven during nighttimemight reduce the usage discount by, for example, 2.5 percent for every1000 nighttime miles driven in excess of 250. High risk miles mightreduce the usage discount at a rate of 12 percent per 1000 high riskmiles driven.

The discount detail section 818 makes it clear that, in the illustratedembodiment, the total discount 852 is calculated by multiplying theusage discount 858 by the safety score 856 and adding the upload bonus854 to that product.

If the party selects or decides to provide the recorded data from thedevice 300 to the insurer, the party clicks the upload button 930. Thepreview software acts as an intermediary and transmits encrypted datafrom the device 300 to a server of the insurer or of a third partyservice party of the insurer via the internet or a telephone dial-upconnection. In some embodiments the transmitted data is encrypted. Oncethat process is completed, the party may click on a clear logger button1040 to direct the preview software to issue commands to erase therecorded data in the device 300, thereby freeing resources for recordinginformation regarding the at least one aspect of machine operation inthe future.

Referring to FIG. 11, in the illustrated embodiment, a portion of theprovided means for the party to review recorded information regardingthe at least one aspect of machine operation is provided in the form ofa Web site. After the insurer or the third party service provider of theinsurer receives a copy of the data that was recorded in the device 300,the party associated with the machine may further review the datathrough the services of the Web site. For instance, the Web siteprovides tools 1114 for examining how altering operational behaviors orcharacteristics would affect the cost of insurance (or a discount orsurcharge on insurance) in the future. For example, the Web siteprovides text entry boxes 1118 or graphical sliders 1122 formanipulating or editing summary information describing the informationreceived by the insurer or the third party service provider of theinsurer. The party logs in or otherwise identifies or associates himselfor herself with the uploaded data and summary information regarding theuploaded data is preloaded into the tools 1114, 1118, 1122.Additionally, a usage discount summary 1126, safety score summary 1130and discount calculation 1134 portions of the Web page are preloadedwith appropriate summary information. The party may then use the textwindows 1118 or sliders 1120 to change the displayed performance summaryinformation in order to determine how different machine operationalbehavior would have affected the cost of insurance or applicablediscount or surcharge, or will affect the cost of insurance in thefuture.

For instance, the party may change a position of an aggressiveaccelerations slider 1138 and observe, for instance, how reducing thenumber of aggressive accelerations performed while driving the vehiclewould affect both a safety score 1140 and a total discount 1142 that theinsurer would have applied against a base premium of the party if thenumber of aggressive accelerations were reduced to the new number.Similarly, entering an increased number of daytime 1144 or nighttime1146 miles would be reflected in the usage discount 1126 summaryinformation and would show a resulting decrease in the total discount1142. Various graphical display techniques can be used to highlight thesignificance of these displayed data manipulations. For example, thecolors of the slider 1122 or entered text 1118 can be changed toindicate the level of risk or safety associated with the currentdisplayed values.

Referring to FIG. 12, providing a means for the party to review recordedinformation regarding the at least one aspect of machine operation caninclude providing further means for the party to compare the at leastone aspect of operation of the machine of the party to similar aspectsof the operation of machines of other parties. For example, a comparisontable 1214 may be provided comparing operational aspects 1218 of theoperation of the machine of the party to an average 1222 for thatoperational aspect calculated from data received from a plurality ofother parties.

Additionally, other services and features may be provided. For example,referring to FIG. 13, a speed distribution graph 1314 may be providedillustrating a percentage of time a vehicle is operated within particlespeed ranges. Similar data could be provided for comparison purposesregarding the speed distribution of the average driver, neighboringdrivers, other drivers of the same model vehicle or any otherappropriate comparison. Furthermore, information can be providedregarding other operational parameters. For example, a distributiongraph might be provided indicating the percentage of time a seatbelt isworn, a radio is played or a cell phone is used or the number of timesturn signals are used per 100 miles.

Summary information regarding the received recorded data can bepresented in other contexts that may be useful to the party or help theparty modify behavior. For example, referring to FIG. 14, a distribution1414 can be provided correlating a driving activity of the party withdays of the week. Additionally, or alternatively, driving activity canbe correlated with a time of the day and presented in graphical form1418. Of course, as explained above, the data can be presented incomparison to other machine operators or drivers. For instance, if thedata is presented in comparison to neighboring drivers, the party may beable to determine a time of day for driving when traffic is reduced.Driving when traffic is reduced may be associated with a reduced levelof risk.

Referring to FIG. 15, the Web site providing a portion of the means forthe party to review recorded information regarding the at least oneaspect of machine operation can present a summary of machine operationin the form of a log. For example, where the machine is a motor vehicle,data can be presented in the form of a trip log 1514. Ignition start andstop events or aspects of machine operation can be used to demarcate thebeginning and the end of trips. The length of time and the number ofmiles driven for each trip or for the total number of trips on a givenday can be presented to the party. Where a fuel consumption aspect isincluded in the recorded data, fuel economy numbers can be included inthe trip log. Providing the fuel economy information in a graphical formmight help a party detect the onset of a mechanical failure and allowthe party to perform preventive maintenance thereby avoiding amechanical breakdown while on the road. Basic trip log information mightbe helpful where the party needs to account for miles driven for workrelated purposes, such as, for example, when filling out expense accountforms. Additionally, where insurance is provided on the basis ofdistances actually driven or a number of hours a machine is operated,either on a pre-paid or post-paid basis, the trip log 1514 can include acost of insurance on a per trip basis and/or on a totalized basis andpresented as a bill or debit from a pre-paid amount.

Referring to FIG. 16, log information 1614 can be presented in a formhighlighting insurance cost increasing events or data, such as,aggressive braking 1618, aggressive deceleration 1622 events, number oftrips, duration of trips, distance of trips and time spent above athreshold speed 1626. This may allow the party to better recognize thekinds of trips where insurance cost increasing events or aspects tend tooccur, thereby allowing the party to be more mindful of their machine ormotor vehicle operating behavior when in those situations in the futureand thereby help the party modify those behaviors.

Referring to FIG. 17, records 1714 related to device 300 operation maybe provided as well. For example, a record can be provided indicatingwhen the device 300 was cleared 1718, when the device 300 was installedin a machine 1722, removed from the machine 1726 and when data wastransferred 1730 to the provided means for the party to review therecorded information such as, for example, the preview software or theserver of the insurer or the third party service provider of theinsurer. This information can also include a percentage of timeinstalled parameter (e.g., 836) referring to the device 300 and/or aremovable storage element thereof.

A network connection to the insurer or a service provider of the insurercan also be a convenient way to maintain the device 300. For example,software updates may be provided for the device through the services ofa Web site. If the device 300 is to be transferred between an oldmachine and a new machine, software included in the device may bechanged to accommodate differences between the first machine and thesecond machine. Alternatively, device updates may be provided in theform of hardware changes (e.g., memory chips or cards) or magnetic oroptical media physically delivered to the party. In yet otheralternatives, updates are provided through wired telephone or wirelessconnections to the insurer or service provider of the insurer.

The provided means for the party to review recorded informationdescribed above is exemplary only. In some embodiments, the means forreviewing will be completely based in software run on a local computingplatform. In other embodiments, the means for reviewing recorded datawill be provided entirely remotely, such as, from a Web site or othercommunications network scenarios. In still other embodiments, no meansfor the party to review the recorded data are provided. Instead, thedata is provided to the insurer without review.

The device 300 for recording the at least one aspect of the operation ofthe machine can be embodied in various combinations of hardware andsoftware. For instance, an embodiment adapted for use in conjunctionwith factory machinery may be embodied almost entirely in software,included, for example, in a programmable logic controller (PLC) orsupervisory computers controlling factory machinery.

An exemplary embodiment 1810 of the device 300 intended for use inconjunction with an automobile, includes a processor 1814, programstorage 1818, a data log 1822, a clock 1826, an internal power source1830, a machine interface 1834 and a display interface 1838.

The program storage 1818 can be based on any suitable program storagemedium. For example, read only memory (ROM), Electrically Erasable ReadOnly Memory (EEPROM), such as, for example, Flash memory or any othernon-volatile storage medium can be used to embody the program storage1818. The program storage includes instructions for controlling ordirecting the processor to record the at least one aspect of machineoperation by receiving signals from the machine interface 1834,processing the signals, and storing information derived from the signalsrelated to the at least one aspect in the data log 822. In someembodiments, the data is stored in the data log 1822 in conjunction witha time stamp based on time information generated by the clock 1826. Theprogram storage 1818 may further include instructions for encrypting thedata. For example, data intended for transmission to the insurer or theservice provider of the insurer is encrypted before, or as it is beingstored in the data log 1822. In some embodiments, a second copy of theinformation is stored in the data log 1822 using a second layer ortechnique of or for encryption. For instance, a first layer or techniqueis used for data intended for use by the display device and the secondlayer or technique is used for data intended for transmission ordelivery to the insurer or the third party service provider of theinsurer. In some embodiments of the device 1818, the program storage1818 includes instructions for determining or monitoring an accelerationand deceleration rate of the vehicle. For example; information from aspeed sensor is received through the machine interface 1834 andprocessed by the processor 1814 according to instructions in the programstorage 1818. The speed information is processed once per second, adifference between consecutive speed measurements is continuouslycalculated. A positive difference between a current speed measurementand a previous speed measurement indicates, for example, anacceleration. A negative difference indicates a deceleration. If a valueof a calculated acceleration exceeds a threshold, the processor 1814 isdirected to process an aggressive acceleration event or trigger. Forinstance, the calculated acceleration rate is stored in the data log1822 in association with a time stamp based on information from theclock 1826 and the current speed measurement. Similarly, when acalculated deceleration rate is beyond a threshold, the processor 814 isdirected by the software stored in the program storage 1818 to processan aggressive deceleration event causing a time stamp, the current speedand the calculated deceleration rate to be recorded in the data log1822. Alternatively, if the device 1810 or the vehicle include one ormore accelerometers, the acceleration and deceleration rates might notbe calculated. Instead, those measurements are received from the one ormore accelerometers. Nevertheless, if an acceleration or decelerationthreshold is exceeded, the processor 1814 processes an acceleration ordeceleration event as described above, except that measuredaccelerations or decelerations are used instead of calculatedaccelerations and decelerations. The program storage 1818 also includesinstructions for the more routine storage of information. For instance,information in the program storage 1818 directs the processor 1814 tomonitor speed signals over the machine interface 1834 and to recordspeed information on a regular basis. For example, speed information isrecorded, perhaps in conjunction with a time stamp, every 10 seconds orat a faster rate if a speed threshold is exceeded. Additionally, otherinformation may be recorded. For instance, trip start and stop times,device 1810 installation and de-installation times, seat belt usage,turn signal usage, location or route information, entertainment systemusage, cell phone usage, tire pressure, or any parameter that may be ofinterest and available via the machine interface.

For example, the machine interface 1834 mates with an onboard diagnosticconnector, such as the connectors known in the automotive industry asOBDI, OBDII and or OBDIII connectors. Additionally, or alternatively,the machine interface 1834 includes a component to mate with industryconnectors known as SAE J-1962 connectors. Furthermore, the machineinterface 1834 may include electronic components for generating signalsthat are compatible with the networks associated with those connectors.For instance, the machine interface 1838 includes all electroniccomponents that are compatible with the industry standard ControllerArea Network (CAN) protocol or other protocols promulgated by theInternational Organization for Standardization (ISO).

The display interface 1838 may include one or more appropriate connectorand associated electronic components for communicating with the displaydevice, computational platform, personal computer or digital personalassistant of the party. For instance, the display device includes anRS-232 connector or USB connector and associated electronics forreceiving and generating signals appropriate to one or more of thoseprotocols. Additionally, or alternatively, one or both of the interfaces1834, 1838 include wireless communications technology such as, forexample, Bluetooth® communications circuitry. In yet anotheralternative, the data log 1822 comprises a removable storage element,such as, for example, a memory chip, card or stick or a rotatable media,such as, for example, a floppy disk, or recordable CD or DVD. In thosecases, the display interface may be considered to comprise the removablestorage element in that the removable storage element is placed incommunication with the display device through, for example, a memoryreader or disk drive that transfers or copies data from the removablestorage element to the display device.

In some embodiments, the device 1810 receives power from the vehiclethrough the machine interface 1834. In those embodiments, the internalpower source 1830 such as, for example, a battery or “super capacitor”is for maintaining the clock 1826 when the device 1810 is disconnectedfrom the machine interface. Additionally, in some embodiments, theinternal power source 1830 provides power to the data log 1822 formaintaining the recorded data when the device 1810 is separate from thevehicle or machine. For example, if the data log 1822 includes CMOSmemory, the internal power source 1830 acts as a battery backup forretaining the data.

In some embodiments, the device 1810 may also receive power from thedisplay interface 1838 when the device 1810 is connected to thecomputational platform, display, personal computer or PDA.

In some embodiments, the internal power source 1830 is not required. Forinstance, in some embodiments, the device 1810 includes a self settingclock that receives a standard time signal, such as those transmitted bygovernmental or standards organizations such as, for example, theNational Institute of Standards and Technology and associated radiostations, such as WWVB.

In these embodiments, the clock is reset to the current time each timeit is connected to the vehicle or to the display and receives power fromthem.

In other embodiments, the clock 1826 is reset when the device isconnected to the computational platform or display device. For example,a Web page or other internet service provides a standard time signalthat is used to update the clock 1826. In these embodiments, theinternal power source 1830 is included and used to operate the clockbetween update events.

The invention has been described with reference to the preferredembodiments. Obviously, modifications and alterations will occur toothers upon a reading and understanding of this specification. Thepresent invention is intended to include all such modifications andalterations in so far as they come within the scope of the appendedclaims or equivalents thereof.

1. A risk management system comprising: a server receiver configured towirelessly receive selected onboard vehicle data monitored by anin-vehicle data monitoring device within a vehicle; a network serversystem coupled to the server receiver that provides an interface havingfunctionality configured to establish relationships between the selectedonboard vehicle data and levels of risk in a usage based insurancesystem; a database that stores relationship data indicating therelationships established between the selected onboard vehicle datarelating to one or more users and an insured's monitored vehicle data,where the relationship data identifies, for an insured or other selectedusers, relationships between relative levels of risk and the selectedonboard vehicle data; and an interface module configured to search thedatabase for a risk assessment of vehicle data, where the interfacemodule is responsive to a request from a database user by using therelationship data and the selected onboard vehicle data to identify thelevel of risk; where the interface module is further configured to beresponsive to a request to quantify driver behavior by processing theselected onboard vehicle data to render a driver safety score, where thedriver safety score is characterized as a level of risk associated withinsuring a selected operator or a vehicle.
 2. A risk management systemcomprising: a receiver configured to receive encrypted data from adevice and restore the encrypted data to its original form; a computersystem that communicates with the receiver and an interface device thatis configured to establish relationships between data that representsone or more vehicle operating characteristics or vehicle operatoractions and data that represents levels of risks associated withoperating one or more vehicles; a database that stores relationship datarepresenting associations between vehicle data associated with aplurality of users and a selected user's monitored vehicle data, wherethe relationship data quantifies, for each selected user, relationshipsbetween relative levels of risk in the operation of the one or morevehicles and the monitored vehicle data; an interface module thatprovides functionality to search the database for a risk assessment ofvehicle data, where the interface module is responsive to a request toquantify driver behavior by processing the monitored vehicle data torender a driver safety score; and a memory that stores software thatcauses a processor to determine a cost of insurance based on the driversafety score.
 3. A system that monitors data transferred amongcomponents within a vehicle that is used to determine one or more levelsof risk or is used to determine a cost of insurance comprising: avehicle bus that is used to send and receive data within a vehicle; anin-vehicle monitor that filters the data that is sent and receivedacross the vehicle bus by selectively acquiring vehicle data related toa level of risk in operating the vehicle or an insurable risk, theselected vehicle data is acquired at a predetermined interval from oneor more vehicle sensors; a processor programmed to write and retrievethe selected vehicle data acquired by the in-vehicle monitor at apredetermined interval; a memory that retains the selected vehicle data,the memory retains the selected vehicle data when not connected to anin-vehicle power source or an out of vehicle power source; and atransmitter configured to electrically encode the selectively acquiredvehicle data related to a level of risk in operating the vehicle or aninsurable risk read from the memory and send the encoded data through apublicly accessible distributed network.